This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json) Hash identifier: AKilgG5a4fX1zI1Wzk8mlcZrYJvBW4y1KAMHmOwOMlA= Subject key identifier: 0B:90:09:07:35:E0:CE:9E:7E:62:4E:0E:8A:74:24:3A:79:6F:10:73 Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Certificate serial: 019B35A0622492435625D2B2734A66A27D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft Manifest number: 0A8D Signing time: Fri 19 Dec 2025 08:01:01 +0000 Manifest this update: Fri 19 Dec 2025 08:01:01 +0000 Manifest next update: Sat 20 Dec 2025 08:01:01 +0000 Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=) 2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: 8he4zUIkczWP9Q+0fdw2Y5a8B9WIzeeNWy7GPHMSOcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:62:24:92:43:56:25:d2:b2:73:4a:66:a2:7d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Validity Not Before: Dec 19 08:01:01 2025 GMT Not After : Dec 20 08:01:01 2025 GMT Subject: CN=0b90090735e0ce9e7e624e0e8a74243a796f1073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:bb:5a:2e:a0:14:a9:59:23:33:64:e6:14: c8:74:cb:e0:40:c4:f1:76:fe:ca:07:33:8e:8d:66: f2:57:ce:76:82:f5:1e:9f:1c:a2:bb:36:7b:07:83: 36:25:6f:2a:ae:75:e9:32:21:16:96:d3:ae:15:f8: 12:05:5c:58:2c:30:7c:63:73:eb:4e:95:2f:39:b7: 13:59:15:84:53:69:d6:ea:1a:66:91:43:d7:91:ab: e8:09:45:2c:e4:43:a0:c1:d4:28:2b:a9:59:f4:2c: bc:62:98:1d:30:b5:f5:d2:31:5f:c8:63:ae:f5:5d: dc:c9:75:47:ee:7a:a5:b2:ae:ac:8d:3b:26:2b:f1: 4e:89:e6:18:42:41:d3:bb:37:1c:4c:20:e5:d3:94: e9:af:b5:60:62:dc:3a:26:0d:85:87:08:d7:fa:b1: ac:e3:2e:c5:bc:96:d9:ff:e9:cb:35:b2:64:ce:de: 04:70:18:22:9b:3d:7a:dd:e1:56:c9:a6:62:21:8e: cd:ab:b7:84:db:d3:a9:cb:48:1f:ff:30:84:e4:22: 86:d8:c5:7b:34:2b:4e:43:3a:39:71:ee:9e:ae:f4: 62:02:8a:13:33:b6:60:92:0c:0c:95:4e:d1:43:19: 1e:cb:20:96:91:b0:5c:56:f9:eb:45:06:00:6b:f2: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:09:07:35:E0:CE:9E:7E:62:4E:0E:8A:74:24:3A:79:6F:10:73 X509v3 Authority Key Identifier: keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:82:f5:0c:45:07:bf:c8:ba:b2:77:ef:51:ac:a2:72:c7:1e: b2:6e:50:4c:38:d7:6e:83:73:c5:38:77:b2:46:25:62:1b:7e: 95:2f:5e:0b:52:9a:03:1d:2d:22:36:c9:30:51:bb:ea:21:9d: 95:e3:0a:42:55:33:e0:76:38:ca:e3:79:5f:1d:0a:cc:cf:35: a1:31:53:48:8e:d3:70:4c:d7:f9:20:c9:78:9b:49:ba:68:ba: 08:61:b5:80:8b:8b:ee:cb:7a:c5:1b:2e:88:7e:04:57:33:8c: 6e:dc:19:6f:68:86:e4:5b:a4:59:f7:f6:9c:69:4d:20:19:6d: be:64:f5:e8:c1:ad:3f:8e:84:c8:6d:c6:65:8b:e9:e4:1c:95: be:4e:f2:7a:1b:7a:9d:fb:25:50:b2:dd:e2:db:63:c1:a0:19: 96:32:ac:2f:d0:68:ea:ed:1c:91:62:20:69:46:c0:24:e7:49: 89:f7:ea:dd:51:8f:91:ba:35:17:59:30:91:77:fa:41:0d:64: bb:e6:fb:6f:d1:51:d4:08:0c:1d:14:c4:26:4a:b2:86:38:73: b3:aa:31:64:75:63:b4:3e:8e:cd:99:7b:d9:dd:71:d8:ad:ed: 11:ee:f9:a7:9d:de:87:67:c5:e0:2e:11:32:e5:5d:c5:19:87: aa:0c:94:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oGIkkkNWJdKyc0pmon2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz YjU2YzAwHhcNMjUxMjE5MDgwMTAxWhcNMjUxMjIwMDgwMTAxWjAzMTEwLwYDVQQD EygwYjkwMDkwNzM1ZTBjZTllN2U2MjRlMGU4YTc0MjQzYTc5NmYxMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiq7Wi6gFKlZIzNk5hTIdMvgQMTx dv7KBzOOjWbyV852gvUenxyiuzZ7B4M2JW8qrnXpMiEWltOuFfgSBVxYLDB8Y3Pr TpUvObcTWRWEU2nW6hpmkUPXkavoCUUs5EOgwdQoK6lZ9Cy8YpgdMLX10jFfyGOu 9V3cyXVH7nqlsq6sjTsmK/FOieYYQkHTuzccTCDl05Tpr7VgYtw6Jg2FhwjX+rGs 4y7FvJbZ/+nLNbJkzt4EcBgimz163eFWyaZiIY7Nq7eE29Opy0gf/zCE5CKG2MV7 NCtOQzo5ce6ervRiAooTM7ZgkgwMlU7RQxkeyyCWkbBcVvnrRQYAa/Iz9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuQCQc14M6efmJODop0JDp5bxBzMB8GA1UdIwQY MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2 LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIL1DEUH v8i6snfvUayicscesm5QTDjXboNzxTh3skYlYht+lS9eC1KaAx0tIjbJMFG76iGd leMKQlUz4HY4yuN5Xx0KzM81oTFTSI7TcEzX+SDJeJtJumi6CGG1gIuL7st6xRsu iH4EVzOMbtwZb2iG5FukWff2nGlNIBltvmT16MGtP46EyG3GZYvp5ByVvk7yeht6 nfslULLd4ttjwaAZljKsL9Bo6u0ckWIgaUbAJOdJiffq3VGPkbo1F1kwkXf6QQ1k u+b7b9FR1AgMHRTEJkqyhjhzs6oxZHVjtD6OzZl72d1x2K3tEe75p53eh2fF4C4R MuVdxRmHqgyUYQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:42:20 2025 by rpki-client